https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 22:12:17 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-137646 EUVD-2026-137646 https://cve.radiocsirt.org/vuln/euvd-2026-137646 https://cve.radiocsirt.org/vuln/fkie_cve-2007-5894 <p>The reply function in ftpd.c in the gssftp ftpd in MIT Kerberos 5 (krb5) does not initialize the length variable when auth_type has a certain value, which has unknown impact and remote authenticated attack vectors. NOTE: the original disclosure misidentifies the conditions under which the uninitialized variable is used. NOTE: the vendor disputes this issue, stating &#34; The &#39;length&#39; variable is only uninitialized if &#39;auth_type&#39; is neither the &#39;KERBEROS_V4&#39; nor &#39;GSSAPI&#39;; this condition cannot occur in the unmodified source code.</p> <p>The reply function in ftpd.c in the gssftp ftpd in MIT Kerberos 5 (krb5) does not initialize the length variable when auth_type has a certain value, which has unknown impact and remote authenticated attack vectors. NOTE: the original disclosure misidentifies the conditions under which the uninitialized variable is used. NOTE: the vendor disputes this issue, stating &#34; The &#39;length&#39; variable is only uninitialized if &#39;auth_type&#39; is neither the &#39;KERBEROS_V4&#39; nor &#39;GSSAPI&#39;; this condition cannot occur in the unmodified source code.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2007-5894 https://cve.radiocsirt.org/vuln/ghsa-jp3p-7xp7-3qgr <p>** DISPUTED ** The reply function in ftpd.c in the gssftp ftpd in MIT Kerberos 5 (krb5) does not initialize the length variable when auth_type has a certain value, which has unknown impact and remote authenticated attack vectors. NOTE: the original disclosure misidentifies the conditions under which the uninitialized variable is used. NOTE: the vendor disputes this issue, stating &#34; The &#39;length&#39; variable is only uninitialized if &#39;auth_type&#39; is neither the &#39;KERBEROS_V4&#39; nor &#39;GSSAPI&#39;; this condition cannot occur in the unmodified source code.&#34;</p> <p>** DISPUTED ** The reply function in ftpd.c in the gssftp ftpd in MIT Kerberos 5 (krb5) does not initialize the length variable when auth_type has a certain value, which has unknown impact and remote authenticated attack vectors. NOTE: the original disclosure misidentifies the conditions under which the uninitialized variable is used. NOTE: the vendor disputes this issue, stating &#34; The &#39;length&#39; variable is only uninitialized if &#39;auth_type&#39; is neither the &#39;KERBEROS_V4&#39; nor &#39;GSSAPI&#39;; this condition cannot occur in the unmodified source code.&#34;</p> https://cve.radiocsirt.org/vuln/ghsa-jp3p-7xp7-3qgr https://cve.radiocsirt.org/vuln/gsd-2007-5894 gsd-2007-5894 https://cve.radiocsirt.org/vuln/gsd-2007-5894 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10899-1 <p>krb5-1.19.2-2.2 on GA media</p> <p>krb5-1.19.2-2.2 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10899-1